tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

HDF5 H5Centry.c H5C__load_entry resource consumption

media: nxp: imx8-isi: Fix streaming cleanup on release

amd/amdkfd: enhance kfd process check in switch partition

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

Apache Log4j Core: Missing TLS hostname verification in Socket appender

Expr has Denial of Service via Unbounded Recursion in Builtin Functions

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

filelock has TOCTOU race condition that allows symlink attacks during lock file creation

Unexpected session resumption in crypto/tls

Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Valkey Affected by RESP Protocol Injection via Lua error_reply

HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

urllib3 Streaming API improperly handles highly compressed data

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.

urllib3 allows an unbounded number of links in the decompression chain